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WHAT IS CLAIMED IS: 



A method of providing access to a resource on a 



network, comprising : 



installing instructions on the network, the instructions 
defining a fixed level of access to the resource; and 

modifying the instructions to change the level of access 
to the resource. / 

2. The method of claim 1, wherein the instructions 
comprise a filter and are installed/on a device on the 
network, the filter being defined toy matching criteria to 
identify a network address and an/action that is performed 
with respect to the network address. 

3. The method of claim If wherein the instructions 
define the level of access to/the resource based on an address 
of a node on the network. / 

4. The method of claain 3, wherein modifying the 
instructions comprises chahging the address upon which the 
instructions base the level of access to the resource. 
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5. The method of claim 4, wherein/modifying the 
instructions comprises substituting a /range of addresses for 
the address upon which the instructic^/s base the level of 
access to the resource. / 



6. The method of claim 5, further comprising installing 
a negative filter within the rang© of addresses in order to 
block an address within the range from accessing the resource. 

7. The method of claim 1/ wherein the instructions are 
installed in a device on the network, and the resource 
comprises bandwidth available from the device. 

8. The method of claim 7, wherein modifying the 
instructions comprises: / 

changing the amount of bandwidth available on the device 
to one or more network nodes. 

9. The method of alaim 1, wherein the instructions 
define the level of acdess to the resource based on a priority 
level of data packets Joeing transmitted through the network. 
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10. The method of claim 1, wherein modifying the 
instructions comprises: / 

changing the amount of data packets having a particular 
priority level that can be transmitted through the network. 

11. The method of claim 9 J wherein the priority level of 
the data packets is defined by /instructions in headers of the 
data packets. / 

12. The method of claiia 2, wherein there are a limited 
number of filters that can be installed on the network and the 
filter is modified to increase a number of users with access 
through the filter. / 

13. The method of claim 2, further comprising installing 
a negative filter on the device in order to identify an 
address that is transmitting data. 



1,4. A computer yprogram stored on a computer-readable 
medium for providing/ access to a resource on a network, the 
computer program comprising executable code that causes a 
computer to : / 
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install instructions on the network, the instructions 
defining a fixed level of access to rhe resource; and 

modify the instructions to cha/ige the level of access to 
the resource. 



10 



15. The computer program ojf claim 14, wherein the 
instructions comprise a filter and are installed on a device 
on the network, the filter being defined by matching criteria 
to identify a network address /and an action that is performed 
with respect to the network address. 



15 



16. The computer prog/ram of claim 14, wherein the 
instructions define the level of access to the resource based 
on an address of a node on the network. 

17. The computer program of claim 16, wherein modifying 
the instructions comprises changing the address upon which the 
instructions base the /level of access to the resource. 



20 18. The computfer program of claim 17, wherein modifying 

the instructions comprises substituting a range of addresses 
for the address upon which the instructions base the level of 
access to the resource. 
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19. The computer program of cla/lm 17, further comprising 
computer code to install a negative /filter within the range of 
addresses in order to block an add/ess within the range from 
accessing the resource. 

20. The computer program of claim 14, wherein the 
instructions are installed in a device on the network, and the 
resource comprises bandwidth available from the device. 

21. The computer program of claim 20, wherein modifying 
the instructions comprises: 

changing the amount of bandwidth available on the device 
to one or more network nodes. 

22. The computer program of claim 14, wherein the 
instructions define the /level of access to the resource based 
on a priority level of pata packets being transmitted through 
the network. 

23. The computer program of claim 14, wherein modifying 
the instructions comprises: 
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changing the amount of data packetis having a particular 
priority level that can be transmitted^ through the network. 

24. The computer program of claim 22 , wherein the 
5 priority level of the data packets i/s defined by instructions 

in headers of the data packets. 

25. The computer program of /claim 15, wherein there are 
a limited number of filters that can be installed on the 

10 network and the filter is modified to increase a number of 
users with access through the fiilter. 

26. The computer program/of claim 15, further comprising 
computer code to install a negative filter on the device in 

15 order to identify an address /that is transmitting data. 



jfl . An apparatus for providing access to a resource on a 
network, comprising : 

a memory which stores/ executable code; and 
20 a processor which executes the code to: 

install instructions on the network, the 
instructions defining a fixed level of access to the 
resource; and 
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modify the instructions to djnanqe the level of 
access to the resource. 



28. The apparatus of claim 27/, wherein the instructions 
5 comprise a filter and are installed on a device on the 

network, the filter being defined/by matching criteria to 
identify a network address and an action that is performed 
with respect to the network address. 

10 29. The apparatus of claiin 27, wherein the instructions 

define the level of access to jche resource based on an address 
of a node on the network. 

30. The apparatus of cAaim 27, wherein modifying the 
15 instructions comprises chancing the address upon which the 
instructions base the level of access to the resource. 



20 



31. The apparatus of claim 30, wherein modifying the 
instructions comprises substituting a range of addresses for 
the address upon which /:he instructions base the level of 
access to the resource/ 
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32. The apparatus of claim 31, wherein the processor 
executes code to install a negative filter within the range of 
addresses in order to block an addres^ within the range from 
accessing the resource. 

5 

33. The apparatus of claim 2ti , wherein the instructions 
are installed in a device on the network, and the resource 
comprises bandwidth available from the device. 

10 34. The apparatus of clai/n 33, wherein modifying the 

instructions comprises : 

changing the amount of bandwidth available on the device 
to one or more network nodesi 

15 35. The apparatus of /claim 27, wherein the instructions 

define the level of access to the resource based on a priority 
level of data packets being transmitted through the network. 



36. The apparatus of claim 27, wherein modifying the 
20 instructions comprise; 

changing the amount of data packets having a particular 
priority level that can be transmitted through the network. 
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37. The apparatus of claim 35, jrierein the priority 
level of the data packets is defined/by instructions in 
headers of the data packets, 

5 38. The apparatus of claim/28, wherein there are a 

limited number of filters that <zan be installed on the network 

and the filter is modified to increase a number of users with 
access through the filter. 

10 39. The apparatus of c/Laim 28, wherein the processor 

executes code to install a negative filter on the device in 
order to identify an address that is transmitting data. 



^6. 



An apparatus fc/r providing access to a resource on a 
15 network, comprising: 

means for installing instructions on the network, the 
instructions defining /a fixed level of access to the resource; 
and 

means for modifying the instructions to change the level 
20 of access to the resource. 
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